Where is the draft User Guide for 2.0 available, please? The most recent one that NIST has is for 1.2.3, dated about two weeks ago.
Thanks, Paul _____________________________________________________________________________________________________ Paul A. Suhler, PhD | Firmware Engineer | Quantum Corporation | Office: 949.856.7748 | paul.suh...@quantum.com<mailto:paul.suh...@quantum.com> Preserving the World's Most Important Data. Yours.(tm) From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of dave.mclel...@emc.com Sent: Monday, April 02, 2012 5:14 AM To: openssl-users@openssl.org Subject: OpenSSL FIPS 2.0 Object Module platform questions In the draft User Guide for the FIPS Object Module 2.0, the official validated platforms are shown as Linux and Windows, 32- and 64-bit architectures, with or without assembler optimizations. The draft Security Policy mentions only Android 2.2 and HP-UX 11i in section 2: Tested Configurations, and mentions changes to accommodate cross-compilation for UCLinux. QUESTION: The Security Policy for 1.2.2 specifically spells out the Linux and Windows validation platforms, but the draft 2.0 document does not. What does this imply about what platforms will be considered validated on the 2.0 module? The User's Guide also mentions success with the build on a number of other Unix platforms, and also uses 'Solaris 10' as an example of a platform appearing in section 5.5 in the statement of use of the Module. QUESTION: even though Solaris is not shown as a validated platform, can we, having implemented with (OpenSSL 1.0.1 and FIPS 2.0) safely make a statement similar to the sample in Section 5.5 on the non-validated platforms? That is, if we implement additionally on Solaris, HP, and Linux IA, for example, can we responsibly make the claim that we are using the validated Module on those platforms? Thanks for any advice. +-+-+-+-+-+-+ Dave McLellan, Symmetrix Software Engineering EMC Corporation, 176 South St, Hopkinton MA Mail Stop 176-B1 1/P-36 office 508-249-1257, fax 508-497-8027 cell 978-500-2546 +-+-+-+-+-+-+ ---------------------------------------------------------------------- The information contained in this transmission may be confidential. Any disclosure, copying, or further distribution of confidential information is not permitted unless such privilege is explicitly granted in writing by Quantum. Quantum reserves the right to have electronic communications, including email and attachments, sent across its networks filtered through anti virus and spam software programs and retain such messages in order to comply with applicable data security and retention requirements. Quantum is not responsible for the proper and complete transmission of the substance of this communication or for any delay in its receipt.
